Cyber Security
Compliance Readiness
Readiness support for ISO/IEC 27001, SOC 2, PCI DSS and the Kenya Data Protection Act: gap analysis, policies, technical controls and audit preparation.
Overview
We prepare your organisation for an external audit or certification by an accredited body, closing control gaps and organising the evidence auditors ask for.
What you get
- Gap assessment against the target standard
- Policy and procedure set
- Technical control implementation plan
- Evidence repository and audit-readiness review
How we work
- 01Scope and gap assessment
- 02Policies and control implementation
- 03Internal readiness review
- 04Support during the external audit
More Cyber Security services
- Security Architecture & Risk AssessmentGap analysis against NIST CSF or ISO/IEC 27001 controls, a prioritised risk register and a security roadmap leadership can fund.
- Server & Infrastructure HardeningLinux and Windows servers hardened to CIS Benchmarks: least-privilege access, SSH and TLS configuration, firewalling, logging and patch baselines.
- Cloud Security Posture ManagementIAM least-privilege review, misconfiguration remediation and continuous posture monitoring across AWS, Azure and GCP against CIS cloud benchmarks.
- Managed Detection & ResponseSIEM/XDR monitoring with 24/7 alert triage, threat hunting and guided response, built on Wazuh or Elastic and mapped to MITRE ATT&CK.
- Incident Response & Digital ForensicsRapid containment, eradication and recovery after a security incident, with forensic root-cause analysis and evidence handled for legal and regulatory needs.
- Vulnerability Management ProgrammeContinuous authenticated scanning, prioritisation by CVSS and EPSS exploitability, and patch SLAs tracked to closure across your estate.
Have a project to scope?
Tell us your objectives and constraints. We reply within one business day.